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Top Stories 

• A Bakersfield, California man pleaded guilty April 21 to conspiring to damage energy 
facilities by stealing programmable logic controllers and other equipment from oil field 
facilities of several companies during 2011 and 2012. - KERO 23 Bakersfield (See item 3) 

• U.S. Chemical Safety Board officials reported April 22 that an April 2013 explosion at a 
fertilizer plant in West, Texas, was preventable and resulted from the owner’s failure to 
take necessary steps to avert a preventable fire and explosion, and from government 
regulators’ failure to identify the hazard. - CNN (See item 4 ) 

• Authorities are investigating after nearly 120 New Hampshire physicians and medical 
personnel had their Social Security numbers stolen and used to file fake tax returns, with 
similar issues also reported in other States. - New Hampshire Union Leader (See item 16 ) 

• Iowa State University notified 29,780 students April 22 after the discovery of a data breach 
that compromised servers containing Social Security numbers and university ID numbers. 

- Iowa State University (See item 21 ) 
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Energy Sector 



1. April 23, KPHO 5 Phoenix - (Arizona) Workers recovering from 3rd-degree burns 
after explosion, fire. Two Fuels, LLC workers were offloading used motor oil into a 
semi-truck when they had a spontaneous combustion causing at least six to eight 
explosions at the company’s Phoenix site. Several surrounding motels were evacuated, 
a portion of the nearby light rail service was halted, and traffic was rerouted while 
crews responded to the scene. 

Source: http://www.kpho.com/storv/25314068/workers-recovering-from-3rd-degree- 
bums-after-explosion-fire 

2. April 22, Chicago Tribune - (International) NTSB head: Oil tanker rail ‘safety has 
been compromised.’ The U.S. National Transportation Safety Board released a report 
April 22 stating that older train cars used to transport crude oil and ethanol are not safe 
for carrying hazardous materials and their design make them susceptible to damage and 
loss of hazardous material. Regulators are recommending updating the federal design 
and setting new standards. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-ntsb-oil-tanker-rail- 
safetv-20140422,0,1439467.story 

3. April 21, KERO 23 Bakersfield - (California) Bakersfield men enter guilty plea to 
damaging oilfield facilities. A Bakersfield man pleaded guilty April 21 to conspiring 
to damage energy facilities by stealing programmable logic controllers and other 
equipment from oil field facilities of several companies during 2011 and 2012. The 
total loss of equipment by the oil companies exceeded $200,000. 

Source: http://www.turnto23.com/news/local-news/bakersfield-men-enter-guiltv-plea- 
to-damaging-oilfield-facilities 

For another story, see item 10 
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Chemical Industry Sector 

4. April 22, CAW - (Texas) West, Texas, fertilizer plant blast that killed 15 
'preventable,' safety board says. U.S. Chemical Safety Board officials reported April 
22 that an April 2013 explosion that killed 15 workers at a West Fertilizer Co. facility 
in West, Texas, was preventable. The board’s report claimed that the explosion resulted 
from the owner’s failure to take the necessary steps to avert a preventable fire and 
explosion, and from government regulators’ failure to identify the hazard. 

Source: http://www.cnn.com/2014/04/22/us/west-texas-fertilizer-plant-explosion- 
investigation/index.html 

5. April 22, Waterloo Cedar Falls Courier - (Iowa) Anhydrous ammonia leak reported 
on tanker truck. A semi-truck that was leaking anhydrous ammonia was pulled over 
by authorities on U.S. Highway 20 near Gilbertville April 22 after motorists reported 
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that fumes from the passing truck began irritating their eyes. Traffic was briefly re- 
routed while authorities worked to determine the extent of the release and capped the 
leak. 

Source: http://wcfcourier.com/news/local/anhydrous-ammonia-leak-reported-on- 



tanker-truck/article 98f541f2-b69e-59c5-8b38-6f08749d9646.html 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

6. April 23, Associated Press - (National) Feds investigating brakes on Chevrolet 
Impala. The National Highway Traffic Safety Administration opened an investigation 
into around 60,580 model year 2014 Chevrolet Impalas due to reports of the vehicles’ 
emergency braking system activating without warning. 

Source: http://www.mvfoxdetroit.com/story/25317094/feds-investigating-brakes-on- 
chevrolet-impala 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. April 23, Leesburg Today - (Virginia) Man arrested for 'skimming' thousands of 
credit cards at South Riding restaurant. A New York man was arrested after being 
confronted by a customer April 8 at the Moca Asian Bistro restaurant in South Riding 
for allegedly using a skimming device. Police then found a skimming device with data 
from over 1,000 payment cards stored on it that were stolen between March 1 1 and 
April 8. 

Source: http://www.leesburgtodav.com/news/man-arrested-for-skimniing-thousands-of- 
credit-cards-at-south/ailicle 50b558ae-caf2-l Ie3-bl74-001a4bcf887a.html 

[ Return to top ] 
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Transportation Systems Sector 



8. April 23, KNBC 4 Los Angeles - (California) 10 Freeway in Pomona reopens after 
double-trailer truck crash. Westbound 10 Freeway in Pomona was closed for about 4 
hours April 23 after a semi-truck overturned spilling rocks and gravel when it crashed 
into a stopped vehicle that has lost control and hit the center divider. 

Source: http://www.nbclosangeles.com/news/local/Overturned-Double-Trailer-in- 
Pomona- 1 0-Freeway-Closure-256326 181 .html 

9. April 23, KFSN 30 Fresno - (California) Pedestrian killed in Fresno HWY 99 hit 
and run. Three people were detained by the California Highway Patrol in connection 
to a fatal hit and run accident where a woman was killed, causing the shutdown of 2 
southbound lanes of Highway 99 in Fresno April 23. 

Source: http://abclocal.go.com/kfsn/story?section=news/local&id=95 13530 

10. April 22, Nashville Tennessean - (Tennessee) Fuel cleanup keeps Cheatham road 
closed. The Tennessee Department of Transportation closed Highway 41 A near the 
Davidson-Cheatham County line in both directions for 1 1 hours April 22 after a semi- 
truck overturned and spilled about 850 gallons of diesel fuel and gasoline. The driver 
was transported to an area hospital while one home was evacuated and 150 others had 
their power cut-off. 

Source: http://www.tennessean.com/story/news/local/cheatham/2014/04/22/flipped- 
fuel-tanker-blocking-cheatham-line/80 14195/ 
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Food and Agriculture Sector 

11. April 22, Forum of Fargo-Moorhead - (North Dakota) North Dakota potato growers 
accused of spoiling crops, insurance fraud. Federal prosecutors filed an indictment 
against two Northwood men who own Johnson Potato Co., for allegedly adding 
chemicals to potato seeds to cut production and fraudulently obtain crop insurance 
benefits from an insurance company and the Risk Management Agency/Federal Crop 
Insurance Corp. Prosecutors allege that between 2002 and 2006 the suspects received 
indemnity payments exceeding $2 million, in addition to crop disaster payments. 
Source: http://www.twincities.com/nation/ci 25613 166/north-dakota-potato-growers- 
accused-spoiling-crops-insurance 

12. April 18, U.S. Food and Drug Administration - (National) Dominex Natural Foods, 
LLC, issues voluntary recall due to possible undeclared nut allergen in 
AngelBowls brand of Corkscrew Pasta & Creamy Tomato Vodka Sauce Pasta 

Bowl. The U.S. Food and Drug Administration announced that Dominex Natural 
Foods, LLC, voluntarily recalled its AngelBowls Corkscrew Pasta and Creamy Tomato 
Vodka Sauce due to undeclared pine nuts. 

Source: http://www.fda.gov/Safety/Recalls/ucm394346.htm 
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Water and Wastewater Systems Sector 

13. April 22, Sacramento Bee - (California) East Bay to tap Sacramento River water. 
The East Bay Municipal District voted April 22 to begin diverting water from the 
Freeport Regional Water Project on the Sacramento River due to the drought across the 
State. The district will take 16,000 acre-feet of the water supply for May and June in 
order to help supply the 1.3 million people it serves in Alameda and Contra Costa 
counties. 

Source: http://www.sacbee.com/2014/04/22/6345332/east-bav-to-tap-sacramento- 
river.html 



14. April 22, Kennebec Journal - (Maine) Water shut off to Richmond mobile home 
park to prevent contamination. A sewage overflow from a private pumping station at 
Meadowbrook Trailer Park flowed into Mill brook, which empties into the Kennebec 
River. The Maine Department of Environmental Protection found high levels of E. coli 
in the river from the waste and the Richmond Utilities District shut off water at the 
trailer park to prevent possible contamination of the town’s drinking water until repairs 
are made. 

Source: 

http://www.kionline.com/news/Water shut off to Richmond mobile home park to 
prevent contamination .html 

15. April 22, Bergen County Record - (New Jersey) Baby ravens nesting on water tower 
costing Fair Lawn $20,000, stalling project. The New Jersey Department of 
Environmental Protection notified the town of Fair Lawn to hold off painting the water 
town for several weeks until baby ravens, found nesting in the rusting structure, can fly. 
The delayed work schedule added an additional $20,000 to the $1.5 million project. 
Source: http://www.northiersev.com/news/baby-ravens-nesting-on-water-tower- 
costing-fair-lawn-20-000- stalling-project- 1 . 1 000287 
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Healthcare and Public Health Sector 

16. April 22, New Hampshire Union Leader - (National) More than 110 NH doctors 
defrauded through filing of fake tax returns. Authorities are investigating after 
nearly 120 New Hampshire physicians and medical personnel had their Social Security 
numbers stolen and used to file fake federal tax returns. The New Hampshire Medical 
Society stated that similar issues were also reported in other States. 

Source: http://www.unionleader.com/article/20140423/NEWS03/140429663 

17. April 22, SC Magazine - (New York) Three laptops stolen from New York podiatry 
office, 6,475 at risk. Three laptops containing patient data were stolen from the Sims 
and Associates Podiatry office in New York in January, potentially affecting 6,475 
patients. Authorities do not believe any personal and medical information was misused 
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and continue to investigate the theft. 

Source: http://www.scmagazine.com/three-laptops-stolen-from-new-vork-podiatrv- 
office-6475-at-risk/article/343644/ 



18. April 22, Enfield Patch - (Connecticut) Indictment brings 3 more arrests in $80 
million theft. Three more men were charged in an indictment unsealed April 21 in 
connection with a March 2010 theft of approximately $80 million in pharmaceuticals 
from the Eli Lilly Co., warehouse and storage facility in Enfield in Connecticut. 
Source: http://enfield.patch.com/groups/police-and-fire/p/indictment-brings-3-more- 
arrests-in-80-million-theft 



19. April 21, U.S. Food and Drug Administration - (National) Hospira announces 
voluntary nationwide recall of one lot of 0.25% Marcaine (Bupivacaine HCI 
Injection, USP), 10 ml, Single-dose, Preservative-Free Vial due to visible 
particulates. Hospira, Inc., announced April 21 a voluntary recall for one lot of 0.25% 
Marcaine (Bupivacaine HCI Injection, USP), 10 mL, Single-dose Vial - Preservative 
Free due to a confirmed consumer report of discolored solution with visible particles 
embedded in the glass, caused by a glass defect. If administered, the particles could 
either block the passage of the solution to the patient and delay therapy or pass from the 
catheter into the patient, causing local inflammation. 

Source: http://www.fda.gov/Safety/Recalls/ucm394340.htm 
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Government Facilities Sector 

20. April 23, WAFF 48 Huntsville - (Alabama) Gurley City Hall airs out following gas 
leak. Gurley City Hall in Alabama was evacuated April 22 and three employees were 
transported to an area hospital after a chlorine cylinder leaked in an attached fire truck 
bay, causing a gas leak. The building was safe to reopen April 23 after crews cleared 
the facility and sealed the leak. 

Source: http://www.waff.com/storv/25316751/gurlev-citv-hall-airs-out-following-gas- 
leak 



21. April 22, Iowa State University - (Iowa) Iowa State IT staff discover unauthorized 
access to servers. Iowa State University notified 29,780 students April 22 after the 
discovery of a breach affecting 5 department servers on campus. The compromised 
servers contained Social Security numbers and the university notified an additional 
18,949 students whose university ID numbers were also located on the servers. 
Source: http://www.news.iastate.edu/news/2014/04/22/serverbreach 

22. April 22, Johnstown Tribune-Democrat - (Pennsylvania) Arrest made in bomb 
threat. Police arrested a man in connection to calling in a bomb threat to Cambria 
County Courthouse in Ebensburg prompting an evacuation that lasted more than 3 
hours April 22. Authorities responded and searched the scene, deeming it safe after 
nothing suspicious was found. 

Source: http://www.tribune-democrat.com/local/x360410Q29/Arrest-made-in-bomb- 
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threat 



23. April 22, South Jersey Times - (New Jersey) Quintin school bus accident injures 2 
students, state police say. An accident involving a school bus left two students injured 
April 22 after the bus struck a utility pole in Quinton Township. 

Source: 

http://www.nj.eom/salem/index.ssf/2014/04/2 student taken to hospital after quinto 
n school mini-bus accident.html 



For another story, see item 31 
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Emergency Services Sector 

24. April 22, San Fernando Valley Post-Periodical - (California) LAPD station closed for 
suspicious briefcase. The Los Angeles Police Department’s West Valley station in 
Reseda was evacuated for 2 hours April 22 after a suspicious package was found near 
the building’s entrance. Authorities are investigating the incident. 

Source: http://www.postperiodical.com/lapd-station-closed-for-suspicious-briefcase/ 
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Information Technology Sector 

25. April 23, The Register - (International) AOL Mail locks down email servers to deal 
with spam tsunami. AOL confirmed that their AOL Mail email servers were under an 
intensive spoofing attack beginning April 20 that has sent large volumes of spam emails 
to users’ inboxes. AOL stated that they changed their DMARC policy in order to 
prevent unauthorized use, but the change may affect some email-forwarding services 
and listservs. 

Source: 

http://www.theregister.co.uk/2014/04/23/aol mail locks down email servers to deal 
with tsunami of spam/ 

26. April 23, Help Net Security - (International) Amazon Cloud IaaS Service servers 
riddled with vulnerabilities. Researchers at Bkav found in the course of a customer- 
prompted investigation that several servers for Amazon’s Cloud infrastructure as a 
service (IaaS) Service and HP’s Public Cloud service contain several vulnerabilities due 
to the servers’ Windows Server installations not being updated for several months. 
Source: http://www.net-securitv.org/secworld.php?id=16731 

27. April 23, Softpedia - (International) SMS trojan Fakelnst targets users in 66 
countries. Researchers at Kaspersky analyzed the Fakelnst trojan for Android and 
found that attackers have added capabilities since it first appeared in February 2013, 
allowing it now to target users in 66 countries. The trojan is disguised as an app and can 
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send SMS messages to premium rate numbers as well as intercept text messages. 
Source: http://news.softpedia.com/news/SMS-Troian-FakeInst-Targets-Users-in-66- 
Countries-438976.shtml 



28. April 23, Softpedia - (International) DDoS attacks increasingly used as a 

smokescreen for data theft. Neustar released its DDoS Attacks and Impacts Report for 
2014 which found that distributed denial of service (DDoS) attacks are increasingly 
used by attackers as cover for more damaging compromises. Around half of 
organizations that reported suffering a breach or DDoS attack in 2013 also had malware 
installed on their systems, with 55 percent of those hit by DDoS attacks losing data or 
funds, among other findings. 

Source: http://news.softpedia.com/news/DDOS-Attacks-Increasingly-Used-as-a- 
Smokescreen-for-Data-Theft-43 8873. shtml 



29. April 22, The Register - (International) Patch iOS, OS X now: PDFs, JPEGs, URLs, 
Web pages can pwn your kit. Apple released updates for its OS X and iOS operating 
systems, closing 19 security issues including a “triple handshake” error in iOS Secure 
Transport that could allow an attacker to inject data into secure connections. 

Source: 

http://www.theregister.co.uk/2014/04/22/apple ios 7 1 1 os x security updates/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

30. April 23, ArkansasMatters.com - (Arkansas) One killed, 40 displaced in Jonesboro 
apartment fire. A fire broke out at the Aspen Garden Apartments in Jonesboro April 
22, leaving 1 person dead and more than 40 residents displaced. 

Source: http://www.arkansasmatters.eom/storv/d/storv/one -killed-40-displaced-in- 
ionesboro-apartment-fir/22405/8IFCdM4MEEOo4flSX ROww 

31. April 22, Milwaukee Journal Sentinel - (Wisconsin) Underground fire forces 
evacuation of Milwaukee Public Market. The Public Market in Milwaukee was 
evacuated and closed April 22 while authorities investigated an underground fire that 
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they believe was caused by a piling being driven into the ground by construction crews. 
The fire burnt itself out and crews determined the fire did not involve the facility or 
pose any threat to the area. 

Source: http://www.isonline.com/news/milwaukee/rnilwaukee-public-rnarket- 
evacuated-after-underground-explosion-reported-b99253676z 1-256208 111 .html 

32. April 22, Durango Herald - (Colorado) Gas leak boots out residents. Residents from 
6 of 10 buildings at the Valle de Merced apartment complex in Durango were 
evacuated for over 3 hours April 21 after construction workers accidentally struck a 3- 
inch gas line. Crews shut off the flow of gas in the area and cut power to the entire 
apartment complex while they worked to cap the leak. 

Source: http ://durangoherald.com/article/20 1 4042 1 /NEWSO 1/1 40429944/- 1 /Real/Gas - 
leak-boots-out-residents— 



33. April 22, BethesdaNow.com - (Maryland) Gas leak in downtown Bethesda leaves 
worker in serious condition. A 1.5 -inch gas line that was ruptured during construction 
work in downtown Bethesda April 22 forced nearby commercial and residential 
buildings to evacuate for about 2 hours and prompted the closure of Wisconsin Avenue. 
One construction worker was transported to an area hospital after he was found 
unconscious in an excavation hole. 

Source: http://www.bethesdanow.com/2014/04/22/developing-gas-leak-in-downtown- 
bethesda/ 
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Dams Sector 



Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 
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